Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

RP_RecordClip_DLL_Hijack

Remote DLL Hijack Vulnerability in Real Player CVE-2022-32291 The Player application which is vulnerable upon starting Real Converter and the Recording Manager are prone to a remote DLL hijack binary planting issue because of unsafe search for unexisting DLLs. To exploit the issue attackers would...

CVE-2023-6241

Exploit para CVE-2023-6241 El análisis completo se puede encontrar aquí. Este es un error en el controlador del kernel Arm Mali que reporté en noviembre de 2023. El error puede utilizarse para obtener ejecución arbitraria de código en el kernel desde el dominio de aplicaciones no confiables, que...

RP_Import_RCE

Real Player 'external::Import' Arbitrary file download, Directory Traversal Vulnerabilities leads to Remote Code Execution video demo: https://youtu.be/CONlijEgDLc Real Player uses Microsoft Internet Explorer functionality and exposes properties and methods through a special mean which is...

CVE-2022-26134

CVE-2022-26134 Confluence Pre-Auth Object-Graph Navigation Language OGNL Injection Confluence is a web-based workspace collaboration product that is developed by Atlassian. It can be deployed on-prem or as part of Atlassian Cloud. It consists of 3 key features: page, space and page tree. Page: Yo...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...

CVE-2025-55182-TOOLS

CVE-2025-55182 Exploit Tool CVE-2025-55182 Comprehensive Exploitation/Detection Tool Developed byMingYi Security Lab Features Vulnerability Detection : Batch scan multiple targets for the vulnerability Path Scanning : Scan common Server Action endpoints to discover vulnerable paths Remote Code...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...

CVE-2025-8110

Exploit RCE en Gogs CVE-2025-8110 Prueba de concepto para CVE-2025-8110 - Ejecución Remota de Código en Gogs mediante bypass de enlace simbólico e inyección de sshCommand. Descripción Este exploit abusa de un bypass de enlace simbólico en la API de Gogs para sobrescribir .git/config e inyectar un...

-Pluck-CMS-RCE-CVE-2023-50564

exploit.py 🐍💥 ⚠️ Aviso legal / ético: este script es solo para entornos autorizados ✅ CTFs, laboratorios, pentesting con permiso. No lo uses contra sistemas sin autorización ❌. 🧾 ¿Qué hace este script? exploitgreenhorn.py automatiza una cadena de explotación típica en un panel web: ✅ Hace login en...

CVE-2023-4220-PoC

CVE-2023-4220 Subida Arbitraria de Archivos / RCE - PoC Creé este script para automatizar la explotación de CVE-2023-4220 y obtener una reverse shell en la máquina PermX de Hack The Box. Esta vulnerabilidad afecta a Chamilo LMS versiones ≤ 1.11.24 , debido a una validación insuficiente en la...

-CVE-2023-33177-

Probador de la vulnerabilidad CVE-2023-33177 de Xibo CMS Herramienta automatizada de pruebas de seguridad para CVE-2023-33177 : vulnerabilidad de path traversal de tipo Zip Slip en Xibo CMS que conduce a la ejecución remota de código RCE. ⚠️ Aviso legal Esta herramienta es solo para fines...

EUVD-2026-66211

Trestle SSTI in Jinja2 include tags allows arbitrary code execution Incomplete fix of CVE-2026-46439...

@bytebase/dbhub's read-only mode does not prevent database writes

Summary Setting readonly = true on the executesql tool does not make the connection read-only. The connectors are written to set PostgreSQL defaulttransactionreadonly=on and open SQLite in readOnly mode, but that code is gated on a config value that is never populated, so it never runs. The only...

CVE-2026-93291 Improper certificate validation in Eufy Omni C20

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code...

EUVD-2026-86413

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code...

CVE-2026-93291

The Eufy Omni C20 is affected by a vulnerability involving improper certificate validation . This flaw could enable an attacker to conduct a man-in-the-middle (MitM) attack, potentially leading to the execution of arbitrary code . No specific software versions, internal components, or remediation...

CVE-2026-89325

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-13249

An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows upload of attacker controlled files without requiring authentication. An attacker could potentially exploit this...